Regulators publish the rules. This is what those rules mean in practice — ODPC guidance, enforcement trends, and the compliance implications for organisations operating in Kenya.
A five-part briefing for Boards, C-suites and risk committees of financial institutions, hospitals and technology companies — covering digital governance, cybersecurity, artificial intelligence, cross-border data and breach readiness. Each briefing is available to read online or download as a formatted PDF.
What every Board should be preparing for, as information, technology and AI risk move from the server room to the boardroom.
What directors need to own before a serious incident, not after one.
Why governing AI can no longer wait for the law that will eventually require it.
What Boards of regionally active institutions need to know about where their data actually goes.
What separates an institution that manages a data breach from one a data breach manages.
Our own proposed framework for the ODPC — mandatory DPO designation, qualification and certification, annual verification, a structured CPD points system, and independence safeguards, drawing on the Mauritian and Nigerian frameworks. A firm publication, not yet in force.
A comparative look at how Mauritius and Nigeria structure their DPO frameworks — and why Kenya's own framework has room to catch up.
The ODPC's enforcement posture has hardened. Here's what that shift actually looks like in practice.
A second sweep of the case law, this time looking past the ODPC to how courts are handling consent and digital identity disputes directly.
Twelve decisions in, the High Court's approach to ODPC disputes is starting to show a consistent shape. Here's what it is.
New reforms have closed the gap digital lenders were operating in. What it means for anyone still running an old playbook.
A constitutional petition is testing how far the state can go in ordering a website blocked — and what due process has to say about it.
We translate ODPC guidance, enforcement trends and case law into a compliance position you can act on.
A short monthly briefing from the Kenya Privacy Law Review — new ODPC determinations, guidance notes, and compliance deadlines. No spam, unsubscribe anytime.